Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Global Cyber Attacks
The incidents, breaches and state campaigns making headlines.
167stories this week
11today
the last seven days
Most fromBleepingComputer, The Record, The Hacker News, SecurityWeek
In the news hereMicrosoft14Google13ConnectWise10OpenAI8SafePay2APT28 (Fancy Bear)2Qilin1RansomHub1
MyCyberWay trainingEvery story here started as an alert. Learn to triage them.See Blue Team Analyst
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
SecurityWeek
-
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet said in a post shared on X. “Bitget’s cold wallets and the overwhelming majority of…
The Hacker News
-
The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1. The issue stems from a preg_replace()…
The Hacker News
-
A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could…
The Hacker News
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-5430 (CVS score: 9.8) – A path traversal vulnerability in WSO2 API Control Plane,…
The Hacker News
-
‘SalesBleed’ security flaws ‘lead to very unexpected consequences’
The Register
